Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Tried to get onto a forum called SpywareHammer and was blocked


  • Please log in to reply
18 replies to this topic

#1 HairyApricot

HairyApricot

  • Members
  • 197 posts
  • OFFLINE
  •  
  • Local time:07:29 AM

Posted 15 December 2016 - 06:27 AM

The message that came up was:

Sorry Guest, you are banned from using this forum!

Access Denied - BT-Central-Plus -Spammer
This ban is not set to expire.

 

I haven't used this site before or been to it. Any ideas whats up?

Thanks :)

 

 

 



BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:29 AM

Posted 15 December 2016 - 07:02 AM

Your IP may of been black listed. You can check at Blacklist Check

 

QUOTE:

Right here and now you can check to see if your IP address is listed on an anti-spam database. Will your emails or forum chats get blocked? Below is a list of the major databases that track blacklisted IP addresses — look at the list now and you'll see there are no checkmarks next to the database names.

Check Your IP Address. Your IP address has been auto-filled in the box below. Click the "blacklist check" next to it and you'll then see checkmarks on the list. Read "What is this all about?" below for an explanation.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 HairyApricot

HairyApricot
  • Topic Starter

  • Members
  • 197 posts
  • OFFLINE
  •  
  • Local time:07:29 AM

Posted 15 December 2016 - 07:09 AM

b.barracudacentral.org dnsbl.sorbs.net dul.dnsbl.sorbs.net l2.apews.org pbl.spamhaus.org

These were the only one that came up, the rest were green. So I assume this is my dynamic IP address that is reassigned every day or son?



#4 buddy215

buddy215

  • Moderator
  • 13,116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:29 AM

Posted 15 December 2016 - 08:36 AM

It's that or a whole block of IPs have been black listed.

 

You can change your IP address. See 2 Easy Ways to Acquire a New IP Address (with Pictures)


Edited by buddy215, 15 December 2016 - 08:36 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 buddy215

buddy215

  • Moderator
  • 13,116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:29 AM

Posted 15 December 2016 - 08:42 AM

There is always the possibility that your computer is being used to spam...such as being part of a botnet.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#6 Trikein

Trikein

  • Members
  • 1,321 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Rhode Island, US
  • Local time:02:29 AM

Posted 15 December 2016 - 09:36 AM

There is always the possibility that your computer is being used to spam...such as being part of a botnet.

 

I think that is more of a likelihood given OP's previous posts.

 

Strange outgoing traffic from svchost.exe(netsvcs), possible infection



#7 HairyApricot

HairyApricot
  • Topic Starter

  • Members
  • 197 posts
  • OFFLINE
  •  
  • Local time:07:29 AM

Posted 15 December 2016 - 03:49 PM

Thing is, there is no strange network activity from my PC apart from that. It happened only once when I went to update windows. Tried again yesterday, and the only IP addresses that turned up were 134.170.51.190, 109.159.156.188, 81.150.21.120 and 131.253.14.153.



#8 buddy215

buddy215

  • Moderator
  • 13,116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:29 AM

Posted 15 December 2016 - 06:47 PM

Since you are still being helped in the malware removal forum....it is best that you finish there first. Be sure to mention

what is being discussed here in that topic.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#9 hamluis

hamluis

    Moderator


  • Moderator
  • 55,723 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:29 AM

Posted 15 December 2016 - 07:01 PM

Open MRL topic, https://www.bleepingcomputer.com/forums/t/634462/strange-outgoing-traffic-from-svchostexenetsvcs-possible-infection .

 

Please continue that topic...this topic in Web Browsing/Email is closed pending final disposition of the malware topic cited.

 

Louis

 

MRL topic concluded, no malware, this topic is reopened.


Edited by hamluis, 23 December 2016 - 07:38 PM.


#10 HairyApricot

HairyApricot
  • Topic Starter

  • Members
  • 197 posts
  • OFFLINE
  •  
  • Local time:07:29 AM

Posted 24 December 2016 - 12:30 PM

Hi again. So no malware was found on my PC. Also, when I go onto the site now, I can get on fine now. Thought?

 

Thanks :)



#11 hamluis

hamluis

    Moderator


  • Moderator
  • 55,723 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:29 AM

Posted 24 December 2016 - 12:48 PM

Your problem has been resolved...I cannot explain how or why, but it no longer exists if you can access the website in question.

 

Louis



#12 Trikein

Trikein

  • Members
  • 1,321 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Rhode Island, US
  • Local time:02:29 AM

Posted 24 December 2016 - 01:03 PM

I think the malware may have caused the ban, but the ban was only on your IP, which changed. It is just important to make sure you find out what caused the spam block to begin with so you can be sure it is gone. Absence of proof is not proof of absence. 



#13 HairyApricot

HairyApricot
  • Topic Starter

  • Members
  • 197 posts
  • OFFLINE
  •  
  • Local time:07:29 AM

Posted 24 December 2016 - 02:47 PM

What do you mean the Malware caused the ban? I never found anything after following all the removal forums instructions. Everything turned up blank. What I can say is that my ip address was 86.etc when I was trying to access it. However it was reassigned to 109.etc just after I made this post. What else do you suggest I do?



#14 Trikein

Trikein

  • Members
  • 1,321 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Rhode Island, US
  • Local time:02:29 AM

Posted 24 December 2016 - 02:55 PM

"What else do you suggest I do?"

 

I can't make a suggestion, only observe the obvious. You got IP banned based on the site seeing spam from your IP. Either you were spamming(no shade), or something on your networking was, and considering you had symptoms of malware on your PC, it makes sense for it to be related to that. However I am not a malware specialist. If the site works now, great. Just keep a eye open for any unusual activity on your computer and if your new IP also gets banned, then you will know for sure the problem isn't fixed. At that point I would suggest making a new thread in the malware forum and ask for someone else (besides who looked at your last thread) to see if they can find something the other person may have missed. Malware removal is more art then science, and sometimes it takes many sets of eyes to figure it out. 


Edited by Trikein, 24 December 2016 - 02:59 PM.


#15 HairyApricot

HairyApricot
  • Topic Starter

  • Members
  • 197 posts
  • OFFLINE
  •  
  • Local time:07:29 AM

Posted 24 December 2016 - 04:16 PM

I did a bit of searching into BT Central Plus. I got a few results from people talking about blocking IP addresses from that range. Buddy also mentioned that. Given that, is it possible that the address I was assigned was used as spam in the past, and as a result was blocked? Then the block was lifted now that my IP changes my address again? Also, thanks :)


Edited by HairyApricot, 24 December 2016 - 04:16 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users